What SIPdia encrypts, what it stores, what it sends, and what it cannot promise.
Details: TLS and SRTP in SIPdia.
| Destination | Data | Why |
|---|---|---|
| Your SIP server, outbound proxy, STUN server | Username, a proof of your password (digest), dialed numbers, call audio | To make and receive calls |
| Firebase Authentication (Google) | Name, email address, account ID from Apple or Google | Sign-in |
| SIPdia's server | Same account details; platform, app and OS version, device model, language; subscription status from Apple | To unlock Premium across devices and support you |
| SIPdia's server | Your SIPdia contacts: names, companies, numbers, email addresses, notes, favorites and photos | To keep them in step on your Mac, iPhone and iPad |
| Nowhere | SIP passwords, call history, recordings, logs | They stay on the device |
Full text: privacy policy.
The call engine is baresip 4.12 with libre, Opus and OpenSSL, built from source with pinned versions and checksums. No private frameworks, no third-party updater, no advertising or analytics SDKs in the apps.
Most SIP incidents start at the PBX, not the softphone. Read how to protect a PBX from scanning and brute force and how to secure a SIP account.
If you find a security issue in SIPdia or on this website, please report it privately so it can be fixed before details are public. A dedicated security contact address will be published here; until then use the contact page. Please do not include SIP passwords or recordings in a report.
No certification claims
SIPdia makes no claim of compliance with any security standard or regulation. The statements on this page describe the software's design as of 2026-11-09.No. No third-party security audit, penetration test or certification has been performed. This page describes the design; it is not an attestation.
Yes, strictly. Certificates must chain to a public certificate authority and match the server name. Self-signed certificates are rejected rather than accepted with a warning.
In the macOS or iOS Keychain. On iOS the item is marked for this device only. Account settings are stored in the app's sandbox container.
Your sign-in (name, email address, account ID from Apple or Google), basic device details used for subscription support, and the contacts you save in SIPdia, so they sync to your other devices. SIP credentials, call history, audio and recordings never leave the device except to the SIP server you configured.
Yes. The site sets no cookies by default. Analytics loads only if it is configured and you allow it.